Stack-based buffer overflow in the check_file_head function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption.

A buffer overflow in the mcrypt commandlinetool was fixed, when the user could be tricked into a prepared file.

The remote host is affected by the vulnerability described in GLSA-201405-19 (MCrypt: User-assisted execution of arbitrary code)

    Multiple vulnerabilities have been discovered in MCrypt:
      A boundary error in MCrypt could cause a stack-based buffer overflow         (CVE-2012-4409).
      MCrypt contains multiple format string errors (CVE-2012-4426).
      MCrypt does not properly handle long file names, which could cause a         stack-based buffer overflow (CVE-2012-4527).
  Impact :

    A remote attacker could entice a user to open a specially crafted file       using MCrypt, possibly resulting in execution of arbitrary code with the       privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Resolve buffer overflow in CVE-2012-4409.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
74781	openSUSE Security Update : mcrypt (openSUSE-SU-2012:1354-1)	Nessus	SuSE Local Security Checks	medium
74061	GLSA-201405-19 : MCrypt: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	medium
62320	Fedora 17 : mcrypt-2.6.8-9.fc17 (2012-13657)	Nessus	Fedora Local Security Checks	medium
62192	Fedora 16 : mcrypt-2.6.8-9.fc16 (2012-13656)	Nessus	Fedora Local Security Checks	medium
62163	Fedora 18 : mcrypt-2.6.8-9.fc18 (2012-13599)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2012-4409

critical

Tenable Plugins

medium

medium

medium

medium

medium